Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/EQogtfwIG0vfRIsrb83BkikUx6w.roa
File: EQogtfwIG0vfRIsrb83BkikUx6w.roa (raw, json)
Hash identifier: fnMUu9z6P/luxngyy5MILnRThzpFqtLF+/+Opl1fOk8=
Subject key identifier: 11:0A:20:B5:FC:08:1B:4B:DF:44:8B:2B:6F:CD:C1:92:29:14:C7:AC
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F2418F6DAD7947B93F1183906D477DEB8
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/EQogtfwIG0vfRIsrb83BkikUx6w.roa
Signing time: Thu 02 Jul 2026 18:30:43 +0000
ROA not before: Thu 02 Jul 2026 18:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47328
IP address blocks: 72.56.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:18:f6:da:d7:94:7b:93:f1:18:39:06:d4:77:de:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 2 18:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=110a20b5fc081b4bdf448b2b6fcdc1922914c7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:57:0f:cf:c0:db:96:39:c2:b8:59:92:4f:
45:f4:7d:8d:30:21:0f:31:bc:50:a2:bb:d6:11:e4:
bf:36:3d:42:fb:67:16:8c:50:a1:62:bf:92:f6:8a:
cd:29:0a:0b:6d:e3:45:38:cd:d5:46:2d:36:3e:f2:
9a:64:66:bc:3c:fe:1f:41:30:32:a7:29:f8:2a:4a:
26:86:8f:1d:08:96:81:c0:81:b7:ab:52:22:b3:fa:
71:fd:d5:57:7e:b5:5d:37:84:76:a6:4a:3b:6f:93:
f7:85:b4:e7:1c:da:c4:a3:51:c0:8a:96:80:98:0d:
a3:e8:0a:de:37:75:cf:8e:31:cb:3d:e0:d8:02:f7:
e2:19:22:f4:4d:48:29:4c:ed:34:e6:25:c6:aa:bc:
4c:1d:bf:2d:ca:72:5a:15:00:a5:ea:f8:69:27:e9:
07:9c:17:47:73:87:1e:19:68:cb:1e:6b:4f:24:a0:
e3:35:d5:3e:e4:85:9f:73:9f:be:92:e7:40:88:79:
e7:ee:9a:b3:fe:c4:06:85:bd:a0:64:f4:4d:a8:63:
a9:ae:9e:75:8d:66:39:40:65:22:e9:26:6c:b5:b6:
71:92:12:69:f9:7d:87:48:74:99:44:86:64:c7:c9:
d2:bb:52:f3:2a:e5:02:5d:93:a5:c8:9e:b4:4b:2e:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:20:B5:FC:08:1B:4B:DF:44:8B:2B:6F:CD:C1:92:29:14:C7:AC
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/EQogtfwIG0vfRIsrb83BkikUx6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.58.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:5c:c1:6c:a6:93:3e:09:6e:32:ce:33:15:de:aa:8e:c3:9c:
53:73:93:36:95:3f:b9:0b:96:57:49:35:4e:b1:fd:ce:6d:d4:
35:e5:f9:97:45:14:8f:92:f5:7d:35:27:df:0c:e3:fa:48:03:
e0:dc:26:5a:ff:2d:a6:eb:d3:5d:06:3d:99:4e:4d:53:ad:ee:
66:5f:c6:ac:5e:a3:ed:2f:b5:e7:39:84:9a:08:43:38:1c:4f:
8c:ee:cd:20:c8:43:26:b7:06:1e:b1:e3:1b:93:1d:e6:1d:ac:
ef:07:73:54:8f:eb:a5:33:d0:b0:a4:0f:ca:7c:90:21:21:65:
f5:24:1f:b0:ff:23:41:6f:a6:68:2f:e3:e6:2f:ba:7b:85:cc:
fc:de:85:d1:4c:eb:c9:f7:6f:3c:fc:48:66:53:f8:78:6d:93:
81:46:ea:55:b3:fe:08:b3:fa:08:70:43:3a:2b:ae:9f:f7:f1:
59:0a:d4:a6:fe:0f:64:ce:ae:c5:c7:2a:19:87:24:94:f5:41:
44:45:d0:74:03:8c:f6:f7:87:9f:da:41:55:2f:31:87:20:a3:
a5:05:44:ea:38:d5:16:32:4e:75:24:ec:c1:66:fd:f1:83:ea:
90:2f:43:45:c7:82:dd:3c:27:44:01:fc:a4:c6:8d:a0:f7:50:
4b:46:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:28 2026 by rpki-client